By ardnet on

Hi guys and girls...

I just realize that, when I set the access controls for authenticated users into "administer users" in user_module, besides editing the username and password for other member, the authenticated users also can still edit the username and the password for Super Admin (/user/1).

Well, I want the authenticated user (that I already set the access rules into "administer users" in user_module), can NOT edit the username and the password for Super Admin only.

How to do that? Do I have to make custom module for that? If it is, can you guys show me some code example for the module?

Thank you so much, before and after.

[Heine - Moved to support]

⋅ Categories: Drupal 5.x

Comments

ardnet’s picture

ardnet commented

a little help please...

ardnet’s picture

ardnet commented

anybody wants to help me?

lainwired’s picture

lainwired commented

Only people who administer the site shoulkd get administer users. so setting all authenticated user to have that is a very bad idea. Are you just trying to allow people to edit their own username? I just dont understand why you want everyone with an account to be able to mess with each other's accounts.

ardnet’s picture

ardnet commented

Ok, here is the case.
I want to setup 3 kind of user. This is regarding to the "user module" in Access Control menu.

1. Super Admin (my self, with the user id = 1)
- can access all the user's profiles
- can... (well, I should be able to do all the stuff with the user)

2. Admin
- can access all user profiles, except the one that belong to Super Admin.
- administer users, except the one that belong to Super Admin.
- change own username.

3. Reguler User (must login first)
- only access their own user profiles.

I want Admin to manage all the registered user, including like: access all the list of users, and also change their data of all users such as change the password or maybe user name.

So I tick "administer user" in order to have that behavior like the one I described above. But, this Admin can also access the detail of me, which is Super Admin. I'm expecting only all users, except me, can be access by Admin.

How do I do that?
Hope you understand what I mean.

Thank you.

awolfey’s picture

awolfey commented

I used User Protect http://drupal.org/project/userprotect to do what you want to do.

ardnet’s picture

ardnet commented

Wow, thanx man, this module does solve my problem :-)